Release stackone-defender: v0.8.2 · StackOneHQ/defender-py

0.8.0 (2026-08-19)

ENG-1084: sanitized is no longer redacted/blocked — gate on allowed. default_risk_level defaults to low. The block_high_risk sanitizer option and the pattern_remover / role_stripper / sanitizer modules are removed.

ENG-1084: detect-and-gate — stop mutating tool-result content (v0.8.0) (e88f544)
ENG-1084: detect-and-gate + sentence-level cleaning (v0.8.0) (60b01d0)
ENG-1084: mark dropped runs with [CONTENT SANITISED] in cleaned copy (fdcdb94)
ENG-1084: NFKC-fold unicode before Tier 2 classification (50741ee)
ENG-1084: return-both — sentence-level cleaned sanitized + original (f4aa1bd)

ENG-1084: add token-degeneracy (OOD) guard to Tier 2 scoring (f450992)
ENG-1084: address review — warmup fail-open + dict-subclass stripping (f49ffcf)
ENG-1084: count objects/arrays once + iterate obj.items() directly (26c7eec)
ENG-1084: fields_sanitized reports Tier-2-cleaned fields, not Tier-1 detections (b3ca53a)
ENG-1084: gate sentence-cleaning on aggregate risk; drop whole-field block (9e25335)
ENG-1084: normalize decorative runs before Tier 2 classification (c2c5d1d)
ENG-1084: return field verbatim when the cleaner drops no sentences (93d664e)
ENG-1084: scan strings in risky array fields + add detected_field_count (6f1b52a)

ENG-1084: call out the 0.7.4 large-array truncation as a fixed data-loss bug (5fc9921)
ENG-1084: complete the DefenseResult field list + require_tier2 in README (35c9e7b)
ENG-1084: document detected_field_count, marker, array-field scanning (5b07c76)
ENG-1084: drop migration/version bullets from README (d62b1e4)
ENG-1084: fields_sanitized now means cleaned fields; add original field; fix stale sanitized=original lines (55d5b9e)
ENG-1084: note large-payload coverage posture + clarify coverage_degraded (fa3e127)